AID-D-009: Fact Assurance & Multi-Agent Hallucination Detection
Detect unsupported, contradicted, stale, or weakly grounded factual claims and identify their propagation across agent boundaries.
Scope boundary
Owns evidence-derived factual claim state and cross-agent propagation findings. It does not write to memory, approve an action, enforce a block, authenticate the transport, or treat peer agreement as truth.
Sub-techniques
Threat mappings
MITRE ATLAS
- AML.T0062 Discover LLM Hallucinations
- AML.T0066 Retrieval Content Crafting
- AML.T0067 LLM Trusted Output Components Manipulation
- AML.T0067.000 LLM Trusted Output Components Manipulation: Citations
- AML.T0070 RAG Poisoning
- AML.T0071 False RAG Entry Injection
- AML.T0080 AI Agent Context Poisoning
- AML.T0080.000 AI Agent Context Poisoning: Memory
MAESTRO
- Data Poisoning (L2)
- Compromised RAG Pipelines (L2)
- Goal Misalignment Cascades (Cross-Layer)
OWASP LLM Top 10 2026
- LLM07:2026 Misinformation
OWASP ML Top 10 2023
- ML09:2023 Output Integrity Attack
OWASP Top 10 for Agentic Applications 2026
- ASI01:2026 Agent Goal Hijack
- ASI06:2026 Memory & Context Poisoning
- ASI08:2026 Cascading Failures
NIST Adversarial Machine Learning 2025
- NISTAML.015 Indirect Prompt Injection
- NISTAML.027 Misaligned Outputs
Cisco Integrated AI Security and Safety Framework
- AITech-5.1 Memory System Persistence
- AITech-7.2 Memory System Corruption
- AITech-9.1 Model or Agentic System Manipulation
- AITech-15.1 Harmful Content
- AISubtech-5.1.1 Long-term / Short-term Memory Injection
- AISubtech-15.1.5 Safety Harms and Toxicity: Disinformation
- AISubtech-15.1.19 Integrity: Hallucinations / Misinformation
Google Secure AI Framework 2.0 - Risks
- IMO: Insecure Model Output
Databricks AI Security Framework 3.0
- Model Serving - Inference requests 9.8: LLM hallucinations
- Agents - Core 13.1: Memory Poisoning
- Agents - Core 13.5: Cascading Hallucination Attacks
- Agents - Core 13.6: Intent Breaking & Goal Manipulation
- Agents - Core 13.7: Misaligned & Deceptive Behaviors
- Agents - Core 13.12: Agent Communication Poisoning